A company has a mix of Windows and Linux servers, some on Azure and some on-premises. The team wants a single configuration management strategy that supports both operating systems, provides central reporting, and can remediate drift automatically. The on-premises servers can reach Azure over the internet. The team is already using Azure Automation. Which strategy should the team adopt?

Use Azure Policy with guest configuration for Azure VMs and a separate tool for on-premises servers.

Use a custom PowerShell script that runs on a schedule to apply configurations to all servers.

Use Azure Automation State Configuration for both Windows and Linux servers, registering all servers as DSC nodes.

Use Ansible with playbooks stored in Git and executed via Azure Pipelines for all servers.

A company has a set of Windows VMs that must have a specific application installed, a particular registry key set, and a service running. The team wants to define this configuration in a declarative format and apply it to new VMs automatically when they are created. The team also wants to monitor for drift and remediate any changes. Which solution should the team implement?

Use a PowerShell Desired State Configuration script that runs once during VM provisioning.

Use Azure Policy with a custom definition that checks for the application and registry key.

Create a custom VM image with the application and settings baked in and use it for all new VMs.

Create a DSC configuration, compile it to a node configuration, and assign it to the VMs in Azure Automation State Configuration.

A company wants to use Azure Machine Configuration to ensure that VMs comply with organizational security settings. What is the primary function of Azure Machine Configuration?

Manage the lifecycle of VM images

Audit and remediate the configuration of Azure VMs

A DevOps team needs to manage the configuration of Windows and Linux virtual machines across multiple Azure regions. They want to use a tool that supports declarative configuration, idempotent application, and integration with Azure for reporting. Which configuration management technology should they choose?

Azure Resource Manager (ARM) templates

Azure Automation State Configuration (DSC)

Microsoft Certified:DevOps Engineer Expert

Domain 3Objective 5

Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 4)

Part of the Design and implement build and release pipelines domain, which makes up ~41% of our current practice bank. Microsoft does not publish an official question count, but from its 140-minute exam (~55–95 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

9concepts

9 Concepts in This Objective

Configuration Management Technologies
Configuration Management Strategy
IaC Strategy Definition
Desired State Configuration Design
Azure Automation State Configuration
Azure Resource Manager and Bicep
Azure Machine Configuration
Azure Deployment Environments Design
Azure Deployment Environments Implementation

Questions 16–20

16expert · hard
A company has a mix of Windows and Linux servers, some on Azure and some on-premises. The team wants a single configuration management strategy that supports both operating systems, provides central reporting, and can remediate drift automatically. The on-premises servers can reach Azure over the internet. The team is already using Azure Automation. Which strategy should the team adopt?
Select an answer first
17application · medium
A company has a set of Windows VMs that must have a specific application installed, a particular registry key set, and a service running. The team wants to define this configuration in a declarative format and apply it to new VMs automatically when they are created. The team also wants to monitor for drift and remediate any changes. Which solution should the team implement?
Select an answer first
18foundation · easy
A company wants to design Azure Deployment Environments to allow developers to create environments for testing. What should they define to specify the resources that are included in each environment?
Select an answer first
19foundation · easy
A company wants to use Azure Machine Configuration to ensure that VMs comply with organizational security settings. What is the primary function of Azure Machine Configuration?
Select an answer first
20foundation · easy
A DevOps team needs to manage the configuration of Windows and Linux virtual machines across multiple Azure regions. They want to use a tool that supports declarative configuration, idempotent application, and integration with Azure for reporting. Which configuration management technology should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-400

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-400” is a trademark of its owner, used for identification only.

Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 4)

Questions 16–20

A company wants to design Azure Deployment Environments to allow developers to create environments for testing. What should they define to specify the resources that are included in each environment?

A company wants to use Azure Machine Configuration to ensure that VMs comply with organizational security settings. What is the primary function of Azure Machine Configuration?

Keep studying — Design and implement build and release pipelines